ONTOLOGY-DRIVEN INTRUSION DETECTION SYSTEMS
Vladimir Jotsov · 2007
We consider and analyze different types of ontologies and knowledge or mataknowledge connected to them aiming at realization in contemporary information security systems (ISS) and especially the case of intrusion detection systems (IDS). Human-centered methods INCONSISTENCY, FUNNEL, CALEIDOSCOPE and CROSSWORD are algorithmic or data-driven methods based on ontologies and interacting on a competitive principle. They are controlled by a synthetic metamethod SMM. It is shown that the data analysis in the field frequently needs an act of creation especially if it is applied in a knowledge-poor environment. It is shown that human-centered methodsare very suitable for resolution of the quoted tasks.